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HFMARKS 

Applicant wishes to thank the Examiner for reviewing the present application. 
ri»fm Amendments 

Applicant advises that claim 12 is amended to correct a typographical error, namely j 
replacing "pairs" with "pair" on line 12 of claim 12. No new subject matter is believed to have j 
been added by way of this amendment. | 

j 

r.1fl iin Rejectio n TI S C. 6 103 ' 

j 

Claims 12-21 have been rejected under 35 U.S.C. § 103(a) as being unpatentable over j 
Applied Cryptography by Schneier ("Schneier") in view of the article "New Public-Key ; , 
Schemes Based on Elliptic Curves over the Ring Zn» by Koyama ("Koyama"). Applicant ; 
respectfully traverses the rejections as follows. 

Claim 12 is directed to a method for verifying a signature for a message m and requires a ( 
sender generating masked signature components (r, s, c). The component r is an integer denved j 
from a coordinate of a first short term public key kP. The component s is a signature component , 
derived by binding a second short term private key, the message m, and short and long term j 
private keys. The component c is a second signature component obtained by combining the first j 
and second short term private keys. This set of components (r, s, c) is used by the verifier for j 
verifying the signature. This is clearly recited in the preamble of claim 1. ^ ^ \ 

In claim 12, the verifier first obtains a pair of signature components (5 . r), where s is ; 
derived from the first and second signature components, namely s and c, the nature of s and c : 
being described above. The verifier then recovers a coordinate pair (x,, yi ), which corresponds to| 
the first short term public key kP. This coordinate pair is recovered using the pair ( J , r) and the j 
message m. The verifier then calculates a signature component r' from one of the coordinate ; 
pair, and then verifies that r' = r, where r was originally included in the pair ( J , r). 

Applicant respectfully submits that the Examiner has misconstrued the teachings of 
Schneier, and will show that Schneier fails to teach what is recited in claim 12. Moreover, the ; 
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« provide, no direction or motivation for applying the teachings to Schneier, and thus are 

i 

^•^nlreUesonapa.s.geinpage^O^.OofSchneier. This passage outiines j 

,„« Guillou-Quisquater Signal Scheme, where Alice compute, signature components d ^ ID ; 
as d - H(M,T) and D - mod « respectively. The component T is computed usmg a random 

teegerr.andthemnctionHis.hashfcnction. Alice sends the components d and D along with | 

themesaageMandh^credentialsitoBob. Bob uses d and D to compute a representation of the j 

component T, namely T and the. calculates a reputation of d, namely d' using the message ; 

M and the representation T. Bob then verifies the signature by comparing d with , 

Firstly, the Eioaminer has equated the components d and D with the components (.,4 j 

and fbnher states that "said component being derived from a first (random integer r) and second ; 

signaturecomponen^Wgeneratedbyasignor...". Applicant believesthat the Examiner!..* | 

notmllyconsidereuthen.tureofC^OrechedinclaimU.Forinstance.JincU.m.Z.s | 

derived from component, a and c. which are derived as outiined above (and clearly reoi.eo in the j 
preamble of claim 12). However, neither component d nor component D are derived in such a j 
way For example, component d is derived from a message M and component T. Although the j 
component s is derived in par. from the message m, there is no teaching in Schneier that would ! 
tad a person skilled in the art to believe that the component T is equivalent to the second short | 
term private key and short and long term public keys. Schneier i. entirely silent in that regard. : 
Therefore. I and d are completely different and thus, Applicant submits, cannot be considered 
equivalent. 

Similarly, the component D is derived from the integer r and the component d. Clearly 
this is not equivalent to how J is derived. In claim 12, component c is derived from the first and 
second short term private keys. A careful review of Schneier will reveal that there is no menUon 
of deriving a signature component in such a way. Equating D in Schneier to either s orris 
believed to be improper and cannot be considered equivalent components. 

Schneier also does not teach obtaining a pair of signature components from a set of three 
components as recited in claim 12. Schneier simply does not teach utilizing masked signature 
components such as (r, s, c) recited in claim 12. In fact, Schneier only teaches Bob obtaining d 
and D directly from Alice and does not include a step of obtaining one component from two 
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oU^onentsgeneratedbvAUoe. fctai.U-.Wy — Moreove^aim 
« reouire, that *e « obtain (I . ') *om (r, a, c). Schneie, does no. have 
step. App li ca n ,beUeve S «ha t <heExa mi »erh M . a ken ! tep S perfo m e4byA.ice»d,«eps 

Li. »2. Applicant beUeve, «h* even taking a "bit from here" and a "b- from there , Schne.er 
still fails to teach what is recited in claim 12. 

Secondly, each step in claim 12 relies in part from what is previously recited ,n the claim. 
For example, verifying r-r requires calculating r' from one of the coordinate pairs which are 
recovered using ( I , r) etc. Applicants believe that they have shown above that Schneier does 
notteach deriving (J. r) as recited in claim 12. Accordingly, Schneier fails to teach any of the 
steps recited in claim 12 for at least that reason. 

Thirdly the Examiner admits that Schneier does not teach recovering a coordinate pair 
using, in part the component pair ( J , r). However, the Examiner then states that: "Koyama 
discloses the use of elliptic curve to calculate digital signatures and therefore the recovering of a 
coordinate pair (xl, yl). . Applicant believes that such a leap of logic is improper, and » fact, 
the Examiner does not even provide an explanation as to where Koyama provides any direction 
or motivation to jump from the mere presence of "elliptic curves" to incorporating an 
undisclosed step into the teachings of Schneier relating to a specific signature scheme. Neither 
Schneier nor Koyama teach recovering a coordinate pair that corresponds to a short term public 
keykPusingapairofsignaturecomponents. Applicants believe that they have shown above 
that Schneier clearly does not teach obtaining a pair of components ( s , r) from components (r, s, | 
c) as recited in claim 12. Therefore, even if a person skilled in the art were to combine the , • 
teachings of Koyama with Schneier, the result would be a random application of elliptic curve j ; 
cryptography to the Guillou-Quisquater Signature Scheme without any direction for how to j ; 
implement a scheme as recited in claim 12, let alone provide any motivation to do so. j ; 

Finally, according to MPEP 2143, in order to establish a prima facie case of obviousness, 
the references, when combined, must teach every element recited in the claim and there must be 
found, some motivation in the teachings to either combine the teachings or modify at least one of 
the teachings to arrive at what is claimed. Applicant respectfully submits that neither of these 
criteria has been met. 

Therefore, Applicant believes that claim 12 clearly distinguishes over the prior art cited 
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by ,he Examiner, and as .oh is in condition for allowance. Cain* 13-21 being ultimate., 
dependent on claim 12 are also believed to distinguish over the pnor an. 

Applicant requests early reconsideration and allowance of the present apphcat.on. 



Respectfully 




Ralph A. Dowell 
Agent for Applicant 
Registration No. 26,868 
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